Nemesis

Overview Nemesis is an open-source, centralized data processing platform that ingests, enriches, and allows collaborative analysis with humans and AI of files collected during offensive security assessments. Nemesis 2.0 is built on Docker with heavy Dapr integration, our goal with Nemesis was to...

CVE-2026-49086

camel-dapr Consumer Routing-Header Override / Confused Deputy Reproducer CVE-2026-49086 This project demonstrates a routing-header override confused-deputy flaw in Apache Camel's camel-dapr component, tracked as CVE-2026-49086. The Dapr pub/sub consumer DaprPubSubConsumer copies fields of the...

GO-2026-6700 vulnerabilities

Vulnerabilities for packages: krakend-fips, telegraf, trufflehog, argo-events, bento, dapr, krakend, guac, keda, trufflehog-fips, bento-fips, keda-fips, dapr-fips, argo-events-fips, falcosidekick, falcosidekick-fips...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: gotenberg, amazon-cloudwatch-agent-operator, cyberark-secrets-provider-for-k8s, mcp-grafana-fips, fleet-server-fips, rabbitmq-cluster-operator-fips, prometheus-statsd-exporter-fips, kubeflow-training-operator, crossplane-provider-aws-emrserverless-fips, gitlab-runner...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: mariadb-operator, step, cluster-api, velero-plugin-for-microsoft-azure, addon-resizer, gomplate, actions-runner-controller, crossplane-provider-aws-eks, rancher-fleet, opentelemetry-collector, kpt, helm-push, dex, k8ssandra-client, yunikorn-k8shim, contour,...

CVE-2026-97032 vulnerabilities

Vulnerabilities for packages: mariadb-operator, step, cluster-api, velero-plugin-for-microsoft-azure, addon-resizer, gomplate, actions-runner-controller, crossplane-provider-aws-eks, rancher-fleet, opentelemetry-collector, kpt, helm-push, dex, k8ssandra-client, yunikorn-k8shim, contour,...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: telegraf, step, kyverno-policy-reporter-ui-fips, karma, caddy, step-issuer, rclone, caddy-fips, step-ca-fips, cloudflared, kyverno-policy-reporter-ui, gitness, tkn-fips, step-ca, tkn, dapr-fips, step-issuer-fips, buf, gogatekeeper, dapr, sftpgo, rclone-fips, step-fip...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: cilium-fips, mcp-grafana, crossplane-provider-aws-codestarnotifications-fips, kubeflow-pipelines, mcp-grafana-fips, fleet-server-fips, commercial-expanso-edge, gitlab-runner, opentofu, knative-eventing, cloudflared, kubernetes-fips, gitlab-workhorse-ce-fips, calico,...

GHSA-QC2Q-P7WX-3PX3 vulnerabilities

Vulnerabilities for packages: cilium-fips, mcp-grafana, crossplane-provider-aws-codestarnotifications-fips, kubeflow-pipelines, mcp-grafana-fips, fleet-server-fips, commercial-expanso-edge, gitlab-runner, opentofu, knative-eventing, cloudflared, kubernetes-fips, gitlab-workhorse-ce-fips, calico,...

CVE-2026-84303 vulnerabilities

Vulnerabilities for packages: dapr, kubernetes-csi-external-provisioner, knative-eventing, datadog-agent, trillian, grafana-mimir, gitlab-runner, bank-vaults, knative-serving, k8sgpt, cloudflared, tempo, istio, rancher-agent, kubeflow, kubeflow-pipelines, secrets-store-csi-driver-provider-azure,...

GHSA-QC2Q-P7WX-3PX3 vulnerabilities

Vulnerabilities for packages: dapr, kubernetes-csi-external-provisioner, knative-eventing, datadog-agent, trillian, grafana-mimir, gitlab-runner, bank-vaults, knative-serving, k8sgpt, cloudflared, tempo, istio, rancher-agent, kubeflow, kubeflow-pipelines, secrets-store-csi-driver-provider-azure,...

GHSA-2V4P-QF9Q-27WJ vulnerabilities

Vulnerabilities for packages: step, cluster-api, velero-plugin-for-microsoft-azure, gomplate, crossplane-provider-aws-eks, opentelemetry-collector, helm-push, dex, k8ssandra-client, yunikorn-k8shim, k8s-device-plugin, k8sgateway, neuvector-scanner, cluster-api-helm-controller, kube-metrics-adapte...

CVE-2026-84445 vulnerabilities

Vulnerabilities for packages: step, cluster-api, velero-plugin-for-microsoft-azure, gomplate, crossplane-provider-aws-eks, opentelemetry-collector, helm-push, dex, k8ssandra-client, yunikorn-k8shim, k8s-device-plugin, k8sgateway, neuvector-scanner, cluster-api-helm-controller, kube-metrics-adapte...

GHSA-6C5V-HQJR-5XXP vulnerabilities

Vulnerabilities for packages: telegraf, keda, nuclio-controller, versitygw, versitygw-fips, opentelemetry-collector-contrib-fips, nuclio-controller-fips, guac, sftpgo-plugin-pubsub, falcosidekick, minio-fips, trufflehog, minio, dapr-fips, argo-events-fips, trufflehog-fips, falcosidekick-fips,...

GHSA-6C5V-HQJR-5XXP vulnerabilities

Vulnerabilities for packages: dapr, sftpgo-plugin-pubsub, trufflehog, minio, telegraf, falcosidekick, guac, argo-events, opentelemetry-collector-contrib, bento, keda...

CVE-2026-79921 vulnerabilities

Vulnerabilities for packages: telegraf, keda, nuclio-controller, versitygw, versitygw-fips, opentelemetry-collector-contrib-fips, nuclio-controller-fips, guac, sftpgo-plugin-pubsub, falcosidekick, minio-fips, trufflehog, minio, dapr-fips, argo-events-fips, trufflehog-fips, falcosidekick-fips,...